MAL-2025-1791

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/engineering-blog/MAL-2025-1791.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2025-1791

Published

2025-03-03T13:24:51Z

Modified

2025-03-31T07:07:49Z

Summary

Malicious code in engineering-blog (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "sha256": "d0610615862f01e0ae383cf9a250c0bcbd24892cc915195285e048ba434238dd",
            "source": "reversing-labs",
            "modified_time": "2025-03-03T13:24:51Z",
            "id": "RLMA-2025-00791",
            "versions": [
                "1.0.4",
                "1.0.5",
                "1.0.6",
                "1.0.7",
                "1.0.8",
                "1.0.9",
                "1.0.11"
            ],
            "import_time": "2025-03-03T15:06:36.636787159Z"
        },
        {
            "sha256": "468bc905cdb368cdf421c2a5acc55f8706b42f455101e859dd67a4c13b8c9a26",
            "source": "reversing-labs",
            "modified_time": "2025-03-28T12:45:20Z",
            "id": "RLUA-2025-01513",
            "versions": [
                "1.0.3",
                "1.0.1",
                "1.0.0",
                "1.0.12",
                "1.0.2"
            ],
            "import_time": "2025-03-31T07:07:12.165097289Z"
        }
    ]
}

References

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / engineering-blog

Package

Name: engineering-blog; View open source insights on deps.dev
Purl: pkg:npm/engineering-blog

Affected ranges

Affected versions

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.0.11

1.0.12

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/engineering-blog/MAL-2025-1791.json"